Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdf304d-a1e6-3519-95bf-9427e16881bd.roa
File:                     ccdf304d-a1e6-3519-95bf-9427e16881bd.roa (raw, json)
Hash identifier:          akUr9MyNo/gJekKdQxk8WePpufgsWwZErS8dtRKf0vM=
Subject key identifier:   BA:26:EC:C9:6D:B6:98:34:C0:2D:3C:D7:12:78:AE:C0:E5:8C:97:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA7CA1CBD3AD3AA488F700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdf304d-a1e6-3519-95bf-9427e16881bd.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     397208
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:7c:a1:cb:d3:ad:3a:a4:88:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=7fbfe682-e500-4ca6-b42b-fc56711dbdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:69:52:ce:99:68:b1:6e:d2:86:9d:2d:cd:ea:
                    16:d2:d2:25:46:98:3d:54:52:6a:f1:f7:8b:94:a9:
                    e4:de:3c:4e:32:f1:7d:5a:ac:ec:73:3c:4d:f8:91:
                    da:f0:f9:21:60:44:1d:4f:e3:78:6a:3c:79:93:4b:
                    7f:60:64:db:a1:54:99:20:e3:5c:38:d1:3c:58:8a:
                    6f:ae:8a:7e:cb:49:2d:44:ed:a8:80:e9:e8:e1:27:
                    95:2f:eb:ba:82:de:98:c3:3a:ec:b7:81:7a:6c:f3:
                    96:89:3f:35:3e:45:ae:7a:90:2a:5a:95:8d:7e:1a:
                    75:db:d8:15:40:65:7c:36:a0:3a:82:89:bf:f6:d7:
                    97:ef:c2:e2:03:3a:09:fb:25:77:5e:fa:11:0c:13:
                    f3:29:37:42:26:6b:d2:05:db:c6:ab:3a:e9:08:c5:
                    b2:c5:e0:08:ed:0e:32:2b:78:d9:64:99:01:33:46:
                    39:f6:fd:c9:2b:47:ed:08:71:a2:3c:09:e3:ae:62:
                    55:53:41:2f:fa:89:f9:1c:7d:ab:57:89:fa:5a:8a:
                    ff:d1:69:cc:26:cf:d0:99:0d:ee:52:90:c4:ea:0d:
                    53:02:8d:49:03:37:1c:7e:40:f5:03:2c:25:ff:a0:
                    75:3b:f2:62:58:5e:0a:c2:c3:79:b0:d3:61:72:62:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:26:EC:C9:6D:B6:98:34:C0:2D:3C:D7:12:78:AE:C0:E5:8C:97:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdf304d-a1e6-3519-95bf-9427e16881bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:fc:c6:fa:8b:b8:4d:7e:27:58:42:fe:7d:4a:a5:5c:1d:69:
         17:f9:ef:60:51:92:7b:f7:6a:97:72:fb:a2:d8:85:dd:8b:3c:
         2d:a9:ee:8a:84:96:cc:88:ec:ba:54:5e:e0:84:aa:2b:d9:e2:
         ba:25:31:8c:3b:14:fa:e2:7d:59:89:41:b2:a6:bb:6f:27:a4:
         90:6d:d2:8c:bd:ca:7b:26:15:95:43:a5:37:fe:b8:3b:17:c8:
         a4:d8:cc:96:c7:4d:29:b5:90:ea:80:18:95:ac:cf:ab:36:51:
         74:8d:71:e6:f6:e3:ce:60:ba:7c:0c:86:b1:90:a6:38:37:5f:
         59:ec:51:02:e0:ed:bc:4e:e3:5a:77:ea:b0:b9:ae:91:41:87:
         b4:7c:9f:b4:90:a2:eb:b3:df:3c:95:3a:c3:09:72:d7:5e:61:
         19:06:06:42:c1:3e:05:8a:5f:21:a8:62:39:85:e0:2d:12:d0:
         0b:7a:d1:38:4e:63:52:75:bd:26:35:e9:1a:40:fb:fd:e9:d0:
         d3:0c:69:9e:86:70:b4:4e:8a:a2:34:f0:03:e1:a6:9a:65:2d:
         e0:62:e2:ef:ff:20:ec:68:7c:5f:4d:5b:78:96:2d:20:37:22:
         2d:3e:07:d3:66:cb:44:6f:f6:5b:81:dd:1f:8d:68:24:67:86:
         d3:8b:c7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:47 2026 by rpki-client